Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The recent news regarding Red Hat's decision to limit access to the source code of their Red Hat Enterprise Linux (RHEL) distribution has garnered considerable…
Will the pre-pandemic norm of exclusively in-office work ever return? The answer is a resounding no. What was coined as the new normal in 2020 has seamlessly t…
Threat actors are using an open-source rootkit calledReptileto target Linux systems in South Korea."Unlike other rootkit malware that typically only provide co…
A new kernel module rootkit malware was released recently on GitHub, dubbed Reptile. It's an open-source rootkit that has the ability to hide itself, other mal…
Microsoft Word documents exploiting known remote code execution flaws are being used as phishing lures to drop malware calledLokiBoton compromised systems."Lok…
Exploit code will soon become available for a critical vulnerability in the Linux kernel that a security researcher discovered and reported in mid-June. Dubbed…
Nitrux 2.8.1, codenamed "sc" for "safer computing," has been released, offering enhanced privacy and security features. While the distribution does not claim t…
An analysis of the "evasive and tenacious" malware known as QBot has revealed that 25% of its command-and-control (C2) servers are merely active for a single d…
Microsoft has shared details of a now-patched flaw in Apple macOS that could be abused by threat actors with root access to bypass security enforcements and pe…
WhatsApp now empowers users to protect specific chats from others holding their devices. The new…Protect Your WhatsApp Chats From Snoopers With Chat Lock on La…
Are you concerned about ransomware attacks? You're not alone. In recent years, these attacks have become increasingly common and can cause significant damage t…
Search giant Google on Monday unveiled a major update to its12-year-oldAuthenticator app for Android and iOS with an account synchronization option that allows…
A new piece of malware dubbeddotRunpeXis being used to distribute numerous known malware families such asAgent Tesla,Ave Maria,BitRAT,FormBook,LokiBot,NetWire,…
TheDark Pinkadvanced persistent threat (APT) actor has been linked to a fresh set of attacks targeting government and military entities in Southeast Asian coun…
Six different law firms were targeted in January and February 2023 as part of two disparate threat campaigns distributingGootLoaderandFakeUpdates(aka SocGholis…
A new financially motivated campaign that commenced in December 2022 has seen the unidentified threat actor behind it deploying a novel ransomware strain dubbe…
The Gootkit malware is prominently going after healthcare and finance organizations in the U.S., U.K., and Australia, according to new findings from Cybereason…
In a continuing sign that threat actors are adapting well to apost-macro world, it has emerged that the use of Microsoft OneNote documents to deliver malware v…
The Emotet malware operation has continued to refine its tactics in an effort to fly under the radar, while also acting as a conduit for other dangerous malwar…
Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive (JAR) files, once again highlighti…
A recent wave of Gootkit malware loader attacks has targeted the Australian healthcare sector by leveraging legitimate tools like VLC Media Player.Gootkit, als…
Microsoft on Thursday flagged a cross-platform botnet that's primarily designed to launch distributed denial-of-service (DDoS) attacks against private Minecraf…
Researchers have discovered a critical remote code execution vulnerabilities in numerous remote keyboard apps for…Critical Vulnerabilities Found In Android Rem…
Apple on Wednesdayannounceda raft of security measures, including an Advanced Data Protection setting that enables end-to-end encrypted (E2EE) data backups in …
